bib-coverage
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow reads only first-party project
.bibfiles and then uses the Paperpile CLI (paperpile get-items-by-folder) to fetch items from an explicitly resolved Paperpile topic folder, but it does not ingest arbitrary outsider-authored free text without selecting specific items from that trusted library.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata